$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa File: 95f415e9-f520-3499-9401-200ef544c860.roa (raw, json) Hash identifier: Vv76vJVlkKpsoxd6VGW4NOsmgRpFEFFHgLBeWpSlXac= Subject key identifier: 13:6F:85:0B:D3:E3:7E:3E:03:21:F6:5C:EA:E2:A6:22:77:A5:0A:B0 Certificate issuer: /CN=e13a5b98-c410-4224-be84-d8a01047fa5b Certificate serial: 010D0C9F4328584A4F05BE0158B4D594C7F7EB80 Authority key identifier: 07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 14041 IP address blocks: 2620:123:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:be:01:58:b4:d5:94:c7:f7:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13a5b98-c410-4224-be84-d8a01047fa5b Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=8e64c35e-0e21-4c6b-9f32-b397ad44ce13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:af:1c:f8:5d:5f:6f:71:39:e9:fd:27:25: 4c:d6:fc:36:8d:57:1a:dd:fd:c5:0d:72:92:4e:9d: af:4b:d2:c6:7d:65:8c:53:83:8d:46:0b:9f:3e:52: 36:ea:c0:92:b3:1c:8d:3b:02:c7:c8:48:38:8a:d0: 97:42:9f:9f:10:35:a4:95:53:01:7d:a1:a6:e7:b3: 85:03:25:d1:63:9d:6c:97:ef:a7:58:34:6c:03:e9: 09:78:8d:94:e3:6e:8a:3c:7b:06:da:63:9f:42:06: 66:21:49:5c:96:6d:af:93:68:ae:c5:37:d6:49:0d: 24:44:7b:24:f8:1a:88:3d:95:7a:3a:bf:fd:de:e8: a3:e5:f2:43:52:bd:b7:85:f3:03:28:40:40:6c:be: 03:bb:2e:b2:04:8e:9c:ad:cf:18:bb:d7:10:8f:da: bf:2b:06:96:ab:06:fc:16:31:fa:59:70:81:5d:c0: 13:10:1b:04:b8:4d:9b:39:dc:72:35:52:ae:3a:7e: a5:15:52:e1:25:4c:b2:b7:dc:88:05:7a:ca:1c:17: 7a:34:c6:2d:81:e2:88:f0:6e:d2:bb:80:2f:66:59: f1:78:72:85:d3:4b:31:48:99:c2:2b:cc:a9:72:32: b9:c9:91:7e:48:2c:17:41:b1:f5:44:1e:44:c4:5c: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6F:85:0B:D3:E3:7E:3E:03:21:F6:5C:EA:E2:A6:22:77:A5:0A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl X509v3 Authority Key Identifier: keyid:07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ff:89:43:b0:88:c7:b3:11:82:68:fc:58:a2:e3:f1:e2:4f: ad:8e:88:b7:4b:8c:69:f7:92:70:a6:0d:3d:6d:88:b3:9e:f9: b9:6c:f2:0e:75:6d:ad:13:6d:f0:19:5d:6e:17:78:c7:e0:a6: bb:db:ea:0b:82:71:f1:10:8c:c8:58:a0:d9:b0:ad:15:6a:63: c6:14:57:52:e2:12:6b:26:ba:b8:66:cd:bc:7d:d3:ff:c5:d0: c7:bc:99:b7:43:89:28:f0:4e:23:dd:85:c8:1d:d1:ea:cb:96: c5:6a:2d:97:1a:86:0d:b7:15:7b:98:d0:d3:b4:c8:59:f0:3e: 3b:fd:b8:33:8c:a1:76:4b:1f:27:b1:94:fd:81:72:6b:fe:a0: 20:71:77:2a:0e:4d:96:88:12:ab:2b:90:df:13:38:f3:f7:db: 5b:5f:0b:ba:16:99:6c:45:c2:6e:02:b9:fc:59:48:54:7e:dd: a9:f9:f9:a5:a6:0e:9f:08:90:3d:33:5d:36:26:62:ab:73:24: 65:de:be:88:16:b4:b1:18:17:b3:2d:e6:9c:b6:77:b1:9e:28: 8a:ad:f6:57:bf:f2:d3:a8:b5:55:6f:27:4c:c0:9e:58:ae:23: 2d:0a:cf:6b:b2:c7:02:0f:ea:74:04:a7:d7:55:e2:b5:16:c5: 6a:f5:18:a8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpPBb4BWLTVlMf364AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEzYTViOTgtYzQxMC00MjI0LWJlODQtZDhhMDEwNDdm YTViMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk OGU2NGMzNWUtMGUyMS00YzZiLTlmMzItYjM5N2FkNDRjZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGCvHPhdX29xOen9JyVM1vw2jVca3f3FDXKS Tp2vS9LGfWWMU4ONRgufPlI26sCSsxyNOwLHyEg4itCXQp+fEDWklVMBfaGm57OF AyXRY51sl++nWDRsA+kJeI2U426KPHsG2mOfQgZmIUlclm2vk2iuxTfWSQ0kRHsk +BqIPZV6Or/93uij5fJDUr23hfMDKEBAbL4Duy6yBI6crc8Yu9cQj9q/KwaWqwb8 FjH6WXCBXcATEBsEuE2bOdxyNVKuOn6lFVLhJUyyt9yIBXrKHBd6NMYtgeKI8G7S u4AvZlnxeHKF00sxSJnCK8ypcjK5yZF+SCwXQbH1RB5ExFxVSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBNvhQvT434+AyH2XOripiJ3pQqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNh NWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEwMTA0N2ZhNWIvOTVmNDE1ZTktZjUyMC0z NDk5LTk0MDEtMjAwZWY1NDRjODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTEzYTViOTgtYzQxMC00MjI0LWJl ODQtZDhhMDEwNDdmYTViL2UxM2E1Yjk4LWM0MTAtNDIyNC1iZTg0LWQ4YTAxMDQ3 ZmE1Yi5jcmwwHwYDVR0jBBgwFoAUBzT8cMlD4r8n1KXf9GQ5fSh+ZXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNhNWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEw MTA0N2ZhNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABI1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJ/+JQ7CIx7MRgmj8WKLj8eJPrY6It0uMafeScKYNPW2Is575uWzy DnVtrRNt8Bldbhd4x+Cmu9vqC4Jx8RCMyFig2bCtFWpjxhRXUuISaya6uGbNvH3T /8XQx7yZt0OJKPBOI92FyB3R6suWxWotlxqGDbcVe5jQ07TIWfA+O/24M4yhdksf J7GU/YFya/6gIHF3Kg5NlogSqyuQ3xM48/fbW18LuhaZbEXCbgK5/FlIVH7dqfn5 paYOnwiQPTNdNiZiq3MkZd6+iBa0sRgXsy3mnLZ3sZ4oiq32V7/y06i1VW8nTMCe WK4jLQrPa7LHAg/qdASn11XitRbFavUYqA== -----END CERTIFICATE-----Generated at Wed Jul 2 10:19:15 2025 by rpki-client